Noli on Magento 2.

What the integration does

It works with Magento Open Source and Adobe Commerce 2.4. Magento Open Source sends no webhooks, so Noli reads the store through its REST API instead - which is why points arrive within about five minutes of an order changing, not instantly.

Before you start

• A Magento admin user that can create Integrations (System → Extensions → Integrations).
• About ten minutes. If your developer or agency runs the store, send them this page - steps 1 and 2 happen in Magento and Cloudflare.
• If the store sits behind Cloudflare or another firewall, access to its rules. Noli calls your API from changing IP addresses, so an IP allowlist won't work - you allow a header instead (step 2).

1. Create the Integration in Magento

1. Add a new Integration

   In the Magento admin open System → Extensions → Integrations and click Add New Integration. Name it Noli. Leave Callback URL and Identity link URL empty, and enter your admin password to confirm.

2. Give it access to these resources

   On the API tab set Resource Access to Custom and tick:

   • Sales → Operations → Orders (with Actions → View), Invoices, Shipments, Credit Memos - to read orders and refunds
   • Marketing → Cart Price Rules - to create reward coupons
   • Customers → All Customers and Customer Groups - coupons apply to every customer group
   • Stores → Settings → All Stores - coupons need to know your websites
3. Save and activate

   Save, then click Activate next to the Integration and Allow. Magento shows four values: Consumer Key, Consumer Secret, Access Token and Access Token Secret. Keep that window open, or come back to it later under Edit → Integration Details.

2. Let Noli through Cloudflare or your firewall

Skip this if nothing sits in front of your store. Otherwise, open Settings → Magento in the Noli admin first: it shows a key made for your store, in the form X-Noli-Key: …. Every request Noli makes carries that header.

In Cloudflare, add one rule:

1. Go to Security → WAF → Custom rules → Create rule.
2. Match when URI Path starts with /rest/ and the request header X-Noli-Key equals your key.
3. Action: Skip - all remaining custom rules, rate limiting rules, managed rules and Super Bot Fight Mode.
4. Place it first in the list and deploy.

(starts_with(http.request.uri.path, "/rest/") and any(http.request.headers["x-noli-key"][*] eq "<your key>"))

Other firewalls work the same way: allow requests to /rest/ that carry the header. The key is not a password for your store - without the four Integration values it opens nothing - but treat it as private anyway.

3. Connect the store in Noli

1. Open Settings → Magento

   In the Noli admin, under Integrations.

2. Paste the store URL and the four values

   The URL is your storefront address, e.g. https://www.your-store.com. If Magento is installed in a subfolder, include it (https://your-store.com/shop).

3. Click Connect Magento store

   Noli checks the keys against your orders API, reads your websites and customer groups, and runs the first sync straight away. Your order history keeps importing in the background over the next runs; the page shows when it's done.

When orders earn points

Noli follows the order's state in Magento - the fixed set every store has - not your custom status labels, so renamed or extra statuses (for example one set by your courier module) don't need any setup.

• Points are counted on the order's grand total less what was refunded, with your earn rules, tier multipliers and boosts - the same as on Shopify and WooCommerce.
• Customers are matched by phone, then email. Someone who hasn't joined your program yet gets the points when they sign up with the same phone or email.
• Orders placed before you connected don't earn. They go into the customer profiles only. To credit past purchases, use the points history import.
• Noli identifies an order by the number your customers see (e.g. 000012345). If your success page already sent orders to Noli with the script from Settings → Web Integration, an order can't earn twice - you can remove that script once the store is connected.

Rewards become Magento coupons

When a customer redeems a reward or converts points in the chat or portal, Noli creates a cart price rule in your Magento admin under Marketing → Cart Price Rules, named Noli: <reward> – <code>:

• Specific coupon, usable once, for all your websites and customer groups.
• Percentage rewards become Percent of product price discount; fixed rewards and points conversions become Fixed amount discount for whole cart; free-shipping rewards set Free Shipping for the shipment.
• A reward's minimum order becomes a Subtotal equals or greater than condition, and its end date becomes the rule's To date.

The customer enters the code in the cart or at checkout. Don't edit or delete these rules while their codes are still out there - they are the coupons.

Put the chat widget on the storefront

1. Copy the script

   In the Noli admin open Settings → Embed on any site, create a widget key if you have none, and copy the script tag.

2. Add it to Magento

   Go to Content → Design → Configuration, edit your store view, open HTML Head → Scripts and Style Sheets, paste the tag and save. Flush the cache under System → Cache Management.

<script async src="https://app.heynoli.ai/widget/v1/noli-widget.js" data-noli-key="pk_live_…"></script>

The script loads on its own and needs nothing from the theme, so it works on Hyvä as well as Luma. Customers sign in to the widget with an email or phone code; signing in automatically with their Magento account comes with the Noli Magento module.

Products for the AI agent

The agent recommends products from a product feed. Add the Google Shopping XML or CSV feed your store already produces (for Google Merchant Center, Doofinder and the like) under Settings → Product feed, and Noli keeps it in sync.

Troubleshooting

Security notes

• The four Integration values stay on Noli's servers. They are never sent to a browser, not even to your own admin.
• The Integration can only use the resources you ticked - give it nothing more than the list above.
• To cut access, click Disconnect in Noli, then delete or deactivate the Integration in Magento. Points and coupons already issued stay valid.